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ABSTRACT 


In  this  paper  we  critically  evaluate  the  classical  least  fixedpo.nt  spproach  towards  rscursive 
programs  We  suggest  a new  approach  which  extracts  the  maximal  amount  of  valuable 
information  embedded  m the  programs.  The  presentation  is  informal,  with  emphasis  on 
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I.  Introduction 


The  classical  stack  implementation  of  recursive  progress  dose  not  always  give 
results  that  correspond  to  our  naive  intuitive  expectat lone.  For  instance,  ona 


sight  expect  the  progras 


F lx)  <■•  0’F (x) 


over,  say,  the  natural  nusbers,  to  be  identical  to  the  progra* 


F (x)  <■•  0, 


since  for  any  nusber  y,  0*y-y.  Slaliarly,  the  progras 


F (x)  <--  if  F ( x > -0  thtn  0 tlst  0 


would  be  expected  to  yield  the  zero  function.  Since  the  test  F(x)-0  jv 
irrelevant,  nothing  but  0 can  be  produced  ee  en  output.  However,  stack 
i sp  I esentat  i one  and  thj*  conventional  theory  of  progress  dictate  that  both  of 
these  programs  be  undef  ined  for  aii  Inputs.  Users  of  recursion  ara  so  accuetosad 
to  this  implementation  that  they  are  no  longer  surprised  at  this  unintuitive 
interpretation,  and  never  stop  to  consider  any  alternative  meanings  of  recursive 


programs. 


A recursive  program,  such  as  those  adove,  looks  like  an  implicit  functional 
equation  relating  the  values  nf  the  function  variable  F.  Such  an  equation  meg  In 
general  have  many  possible  so  ution  functions  Iflxtdpoints)  .Since  there  ie  no  uni  qua 
solution,  the  semantics  o'  recursive  programs  It  selected  rathar  than  implied. 
The  classical  stack  Implementation  yields  one  solution,  the  least  defined  fix td point 
of  the  program.  As  we  have  eesn  above,  the  blind  selection  of  the  ieaet  defined 
solution  is  inadequate,  beceuee  a recursive  program  of  tan  contains  more 
information  than  this  solution  exhibits. 


In  this  pap*-  we  suggest  xhe  selector  of  a different  and  more  defined  solution, 
which  always  exists  end  which  conteins  en  much  information  es  possible. 


In  Section  ]]  we  discuss  various  possible  approaches  towards  recursive  programe, 
ir  an  attempt  to  characterize  the  "best"  one.  On  the  basis  of  this  discussion  we 
introduce  our  new  optimal  flxedpoint  approach  In  Section  III,  which  is  exemplified  in 
Section  IV.  Various  techniques  for  proving  propsrtles  of  optisei  fixedpoints  ere 
presented  in  Section  V, 


This  paper  ie  an  informal  exposition  of  the  optimal  flxedpoint  theory.  Mora 
formal  treatment  is  given  in  Hanna  and  Shamir  (1975J  and  Shamir  (1976). 


II.  Recursive  Programs  and  Their  Fixedpuintt 


Consider,  as  a typical  example,  the  following  recursive  program  PI  over  the 
natural  numbers  (see  note  (i)J: 


PI:  F(x,g)  <--  if  x-0  then  y else  F (F  (x, y-1 ) ,F (x-1 , y) ) . 


Any  solution  function  to  this  program  must  satisfy  the  relations  dictated  by  the 
program,  i . e. . 


(a)  F(0.y)  - y for  all  y , and 

(b)  F(x,y)  - F(F(x,y-l),  F(x-l,y)l  for  all  xe0  and  all  y. 


Let  us  analyze  what  functions  satisfy  these  two  conditions. 


The  main  part  of  this  program  is  the  functional 


T IF ] : if  x-0  thtn  y tilt  F IF  IX.  y-1 ) ,F  (x-1 , y) ) , 


m which  the  symbol  F is  considered  as  a function  vonablt  Given  any  partial 
function  f ( x , y ) , the  result  of  substituting  f for  F yields  a new  partial 
function,  denoted  by  flf].  For  example,  if  we  substitute  the  function 


f ( x,  y)  - y 


for  F ( x , y ) , we  obtain  the  function 


VlfJ(x.y)  • if  x-0  thtn  y the  f(f(x,y-l),  f(x-l,y)) 
- if  x-0  thtn  y tin  f(y-l.y) 


- y. 


Thus,  the  function  f(x,y)  has  the  interesting  property  that  f (x,y)-r  (f]  (x,y)  , 

that  is,  f is  a solution  function  to  the  functional  equation  F (x,y) -T  IF]  (x,  y)  . 
Since  f does  not  change  under  the  application  of  T , it  it  said  to  be  a flxtd  point 
of  the  given  recursive  program. 


An  entirely  different  function  which  is  a fixedpoint  of  the  program  ie: 


g(x,y)  - max(x.y)  . 
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Substituting  g for  F in  r(F]  , ua  obtain: 


fig]  (x.y)  - if  x-0  then  g tlst  max  (max  (x,  y-1 ) , max(x-l  ,y) ) . 

By  tha  dafimtion  of  max,  thia  can  ba  siaolifiad  to: 

fig]  (x.y)  • if  x-0  then  y else  max (x. y-1  ,x-l,y) 

- if  x-0  then  max(x,y)  f/jrmax(x,y) 

- max(x.y)  . 

Thua  g(x,y)  • a fixadpoint  of  the  racuraiva  program  PI. 

Vat  anothar  example  of  a fixadpoint  ia  tha  partial  function: 

/(x.y)  - if  x-0  then  y else  undefined  . 

To  show  that  thia  function  ia  indeed  a fixadpoint  of  our  racuraiva  program,  ua 
aubetituta  / in  f , treating  undefined  aa  any  other  vaiue.  For  thia  purpose  ua  make 
the  general  assumption  that  all  functions  and  predicates  appearing  In  T arm 
"naturally  extended."  in  tha  Sanaa  that  they  are  undefined  whenever  at  laaat  ona 
of  their  arguments  is  undefined.  Thua,  ua  have: 

f l/l  (x.y)  - if  x-0  then  y else  /(/(x,y-l) . / ( x-1 , y ) ) 

- if  x-0  y else 

l Ilf  x-0  then  y-1  else  undefined,  /(x-l,y)) 

- if  x-0  then  y else  llundeflned,  /(x-l,y)) 

• if  x-0  then  y else 

if  undefined -0  then  ll*-i,  y)  else  undefined 

- if  x-0  then  y else  undefined  . 

These  4hraa  functions  do  not  exhaust  tha  sat  of  all  fixedpointi  of  tha  program. 
An  axampla  of  an  infinite  class  of  fixedpolnts  (Indexed  by  tha  function  a over 
the  natural  number a)  ia: 


h (x.y)  - if  x-0  then  y else  alx). 


A function  ha(x,y)  can  ba  shown  to  ba  a fixadpoint  of  the  program,  provided  that 
tha  function  a(n)  satisfies: 


<*(n)a0  and  ils(n)l-tln)  for  all  n > 0. 
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Examp  I ••  of  functions  satisfying  this  condition  are  the  identity  function,  any 
non-zero  constant  function,  or  the  function  which  assigns  to  any  nature!  number  n 
its  greatest  prime  factor. 

There  are  actually  infinitely  many  more  distinct  fixedpoints,  the  exact 
character izat ion  of  which  is  quite  complicated.  Ue  can  thus  see  that  the  eat  of 
all  fixedpoints  of  the  program  may  contain  many  functions  with  extremely 
diversified  behavior.  All  these  functions  can  be  considered  as  "soiutione"  to  the 
equation  represented  by  our  recursive  program. 

Some  of  these  fixedpoints  are  related  by  the  "less  defined  or  equal"  relation.  Ue 
say  that  a function  r(x.y)  is  less  defined  or  equal  to  s(x,y),  or  that  s(x.y)  ja  m0T, 
defined  or  equal  to  r(x,y).  if  for  any  pair  of  natural  numbers  (a.b)  , if  r(e,b)  is 
defined  than  s(a,b)  is  aleo  defined  and  has  the  same  valuei  thus,  either  r(e.b) 
is  undefined  or  else  r (e.  b) -s  (a.  b)  . Note  that  a function  r(x.y)  may  bo  neither 
"less  defined  or  equal"  nor  "more  defined  or  equal"  to  s(x,y). 

This  relation  introduces  some  structure  into  the  set  of  all  fixedpoints  of  a 
recursive  program.  A fixedpoint  is  called  least  (defined)  if  it  is  less  defined  or 
equa:  to  any  other  fixedpoint  of  the  prog*am.  Dually,  a fixedpoint  is  called 

greatest  ( defined ) if  it  is  more  defined  or  equal  to  any  other  fixedpoint. 

Among  the  fixedpoints  of  the  program  PI  , the  fixedpoint: 

/(x,y)  • if  x-0  then  y else  undefined 

stands  out.  Since  any  fixedpoint  of  PI  must  be  defined  as  y for  x-0,  it  is 
clearly  the  program's  least  fixedpoint. 

Least  fixedpoints  of  recursive  programs  have  long  attracted  the  attention  of 
computer  science  theoreticians  for  three  main  reasons  (see,  e.g. , flanna  (1974)): 

(a)  Any  recursive  program  must  have  a (unique)  ieaet 
fixedpoint.  Thus  the  least  fixedpoint  can  be  used  to 
unambiguously  define  the  "meaning"  of  recursive  programs. 

(b)  The  classical  stack  implementation  of  recursive  programs 
computes  the  least  fixedpoint  of  the  program. 

(c)  There  are  powerful  methods  for  proving  properties  of  the 
ieast  fixedpoint  of  programs. 

Ae  a result,  the  least  fixedpoint  was  chosen  as  the  "proper"  solution  of 
recursive  programs  and  other  fixedpoints  were  absolutely  discarded  by  researchers 
from  further  consideration.  However,  we  have  an  important  objactlon  to  this 
choicei  it  contradicts  the  intuitive  concept  that  the  more  defined  the  solution, 


} 


the  wore  valuable  it  is.  Indeed,  there  are  many  recursive  programs  for  uhlch  the 
least  fixedpoint  does  not  contain  all  the  ueeful  information  embedded  in  the 
program,  information  which  is  contained  in  more  defined  fixedpoints. 

Consider,  for  example,  the  following  recursive  program  P2  for  solving  the 
discrete  form  of  the  Laplace  equation,  where  F(x,y)  maps  pairs  of  Integers  in 
(0,100}  x (0,100}  into  reals: 

P2:  F(x.y)  - if  x-0  thin  2y 

ilsi  if  x-100  thm  3y*300 
list  i f then  3x 
tlst  if  y«100  thin  4x+200 

list  IF  (x-1  ,y)4f  (xty-l  (x*l,y)«F(x,y+l) ) /k  . 

This  recursive  program  has  sxactly  two  fixedpoints: 


f 2y  if  x »0 

j 3y+330  if  x-100 

f lw,g)  • \ 3x  if  y-0 

j 4x-»200  i f y-100 


\undtflmd  otherwiss 
and 

g(x,y)  ■ 3x+2y+(x.y)/100  for  0Sx,y$100  . 

There  is  no  doubt  that  the  second  (totally  defined)  fixedpoint  g(x,y)  contains 
much  more  valuable  information  than  the  (mostly  undefined)  function  f(x,y) 
Moreover,  it  is  quite  obvious  that  any  programmer  writing  such  a recursive 

program  unconsciously  thinks  about  the  function  g(x,y)  as  the  "solution"  of  the 
functional  equation  represented  by  the  program.  Thus,  the  arbi *rery  selection  of 

the  least  fixednoint  as  the  "proper  solution"  seems  a poor  choice  in  this  case. 

This  example  might  suggest  a turn  to  ths  other  extreme  - considering  greatest 
fixedpoints  rather  than  least  f ivedpoints.  Unfortunately,  there  ere  meny  programs 
for  which  there  is  no  such  greatest  fixedpoint.  as  program  PI  shows:  There  is  no 
funct  on  which  is  more  defined  than  all  the  fixedpoints  exhibited. 

A more  modest  approach  could  bs  the  selection  of  a maximal  fixedpoint,  l.e. , a 
fixedpoint  which  is  not  less  defined  than  any  other  fixedpoint.  However,  there 

are  difficulties  with  this  choice  too.  Uhiie  any  recursive  program  has  such  a 
fixedpoint,  it  may  have  more  than  one.  This  is  demonstrated  by  program  PI.  in 
which  the  functions  f(x,y),  g(x,y)  and  hfl(x,y)  are  aii  examples  of  total,  and 

therefore  maximal,  fixedpoints  of  PI.  This  indicates  that  PI  ia  an  "underdefined" 
recursive  program  - the  relations  stated  between  values  of  F for  various 

arguments  (x,y)  are  not  uufficient  to  uniquely  determine  one  defined  value  of  the 
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* -eopomt.  Thua  «i  randomig  chosen  maximal  fixeapomt 
the  least  fixeapomt  '(*,y)  ,n  this  case. 


s by  no  means  superior  to 


An  art  * 1 c i a I example  which  illustrates  tn,,  problem  9: 

P3 l P ( * ) < • P I H ) 

r 7-:  ... 

....  . ...  o ",  r:°Z  •■t,u 

. , s e O.a  ig  undefined  function,  ana  eve  j totai 

J °n  °Ver  d’ural  nurber9  19  * "a-.mai  fixeapomt.  In  9uxn  a case  the 

east  . -eapo  *t  seem5  the  most  appropriate  so  ut,0n.  9,nCe  n0  o,,r  " 1 
can  »e  ccnsiaerea  a more  valuable"  solution  0f  tm.  program. 

Ill  The  Optimal  Fixrdpomt 

Thus  ‘ar  ue  have  objected  to  *he  ciass.ca,  leas*  ♦ ,.eaoomt  .K 

-ea*es*  and  nax  ma  ‘ixearo  nt  approaches  to  ^cu^ve  program,.  ge 

1 CUJ  3rCrC3C^  --  ♦♦'P  nr  t 4 * I 

C OC  f »e<JrO'  n*  approach”  It  rnmhin*. 

«• «"  -*  — • a™,  n ,w  ln. . J:0.ncr z 'l s,: n,c* 

um  yue  y e.  s t s . and  . t suppl  e,  *he  maximal  amount  of  valuable  f ?aWB 
embedded  n the  program.  Tnus  in  the  examples 

5e,CCt  "e  ,e35t  ^e0P0,nt  ^ ^ram.  PI  Z 

' 56  * th*  068  r*d  t0tal  #l«^Domt  (which  d-ff.re  from  the  I..  * 

‘ xedro  nt)  n ,he  Ladace  program  P2  . th*  'eaet 


!”  °rd*r  t.°  the  new  approach  introduce  the  notion  0f 

con,  stency.  Two  functions  r,  said  to  be  con  us’ frit  ,f  they  have  identical 
for  any  argument  for  wh,ch  both  are  defined.  For  example,  let 


va I ue. 


f | (x) 


f 

•<un 


f3(x) 


[l 


undefined 

,0 


f,(x|  -Vl 


I 

■E 


^undefined 


if  X X 0 

I • ..  I 

0 t her  w I se 

1 f x«0 
i f x-1 


undefined  otherwise 


i f X.0 

I f X»i 

other  w i se 


'■  S"a  <!  ar”  COn,i,,'n'-  *•  ar*  '|  ™ h • However,  ,,  and  ,r. 
con„„en,.  eince  lor  .-1  oo.n  are  defined  and  have  d,ff.r.„,  value..  Note 
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no  two  of  these  functions  are  related  by  the  "lest  defined  or  equal"  relation. 

Two  consistent  'unctions  can  be  regarded  as  being  " approximately  the  same"i  One 
function  nay  be  defined  for  several  arguments  at  which  the  other  ie  undefined, 
and  vice  versa;  but  the  two  functions  cannot  have  contradictory  defined  values. 
They  can  be  considered  as  two  incomplete  representat i one  of  tha  same  knowledge, 
and  one  can  define  a function  which  is  more  defined  than  both  of  thea,  thus  being 
superior  to  both  partial  representat ions. 

Ue  now  define  a fixedpoint  f of  a program  P to  be  fxp-consisttnt  If  f is  consistent 
with  any  other  fixedpoint  g of  P . That  is.  whenr/ver  f is  defined,  say  f(x)«a 
then  for  any  other  fixedpoint  g , either  glx)  is  undtflntd  or  g(x)-a  . Thus  the 
value  a is  implicitly  defined  by  the  program  as  the  only  possible  defined 
solution  at  x.  Every  recursive  program  has  at  least  one  fxp-consi  stent 
fixedpoint.  smce  the  least  fixedpoint  of  the  program  is  less  defined  than  (and 
thus  consistent  with)  any  other  fixedpoint  of  the  program.  Thus,  the  classical 
least  fixedpoint  is  one  of  these  valuable  fixedpoints,  but  only  one  of  many. 

The  fxp-cons*  stent  fixedpomts  can  be  considered  as  the  only  genuine  soiutione  of 
a recursive  program,  since  only  they  contain  uniquely  determined  vaiuas.  Ue  can 
thus  concentrate  our  attention  _>n  the  subset  cf  fxp-consi  stent  fixedpoints  rather 
than  on  the  set  of  all  fixedpoints  of  the  program.  In  this  restricted  eat  of 
solutions  we  are  naturally  interested  in  maximally  defined  solutions  of  the 
program.  Uhile  the  greatest  fixedpoint  approach  was  not  applicable  to  the  eat  of 
all  fixedpoints  of  the  program,  we  now  fortunately  have  [see  note  (li)]j 


Basic  T htortn  T ht  stt  of  all  fxp-consisttnt  fixtdpoints  always  contains  a (uniqut)  grtattst  tltmtnt. 

Let  us  now  look  at  the  set  of  fixedpoints  from  a different  point  of  view. 
Previously,  ue  discussed  the  possibility  of  selecting  a maximal  fixedpoint  as  the 
"proper"  solution  of  the  program.  This  approach  was  noi  applicable,  since  tha 
program  may  have  infinitely  many  such  solutions  with  no  information  common  to  all 
of  them,  and  no  one  of  -ihich  seems  superior  to  the  others.  A natural  way  to 
resolve  this  problem  is  to  find  a fixedpoint  which  extracts  the  unanimity  among 
these  maximal  fixedpoints,  thus  being  a satisfactory  representative  of  all  of 
them.  Such  a fixedpoint  can  be  obtained  by  considering  the  fixedpointe  which  are 
leso  defined  than  all  the  maximal  fixedpoints.  For  these  fixedpoints  we  again 
have  (see  note  ( i i i )] ; 


Basic  Thtortm  Tht  stt  of  fixtdpoints  which  art  Itss  dtflntd  than  all  Maximal  fixtdpoints  of  tht 
program,  has  a (uniqut)  grtattst  tltmtnt. 
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Ue  have  thus  arrived  at  two  possible  definitive  of  the  "most  desired  solution" 
of  a recursive  program,  the  first  bg  ascending  as  much  as  possible  frost  the  least 
fixedpomt  m the  set  of  f xp-co -is  i stent  fixedpoints,  and  the  second  bg  descending 
from  the  maximal  fixedpoints. 

It  is  quite  natural  to  relate  these  two  "desired  solutions"  of  a recursive 
program.  Surprisingly  enough,  these  tuo  fixedpoints  always  coincide,  and  ue  call 
the  fixedpomt  thus  defined  the  optimal  fixedpoint  of  *he  program. 

By  the  definition  of  the  optimal  fixedpomt,  it  follows  that  any  rocureive 
program  has  a unique  optimal  fixedpoint.  If  the  proc-am  has  only  one  fixedpoint 
uhich  is  fxp-consi  stent,  the  optimal  fixedpoint  coincides  with  the  classical 
least  fixedpomt.  On  the  other  hand,  if  the  program  has  a unique  maximal 
fixedpoint,  the  optimal  fixedpoint  coincides  with  it.  In  all  other  cases,  the 
optimal  fixedpomt  "floats"  somewhere  in  the  set  of  all  fixedpoints.  Ue 
illustrate  this  with  the  following  diagram  (see  Fig.  1),  which  summarizes  some  of 
the  Structural  properties  of  the  set  of  fixedpoints  of  recursive  programs.  In 
this  diagram  an  upper  section  (Fig.  2A ) represents  the  set  of  all  flxedpointe 
which  are  more  defined  or  equal  to  f ; similarly,  a lower  section  (Fig.  2B) 
represents  the  set  of  all  fixedpoints  uhich  are  less  defined  or  et,ual  to  f . The 
"strategic  position"  of  the  optimal  fixedpomt  is  clearly  visible. 


IV.  A Detailed  Example 

Consider  the  following  family  of  recursive  programs  over  the  natural  njmberes 

Pgi  F(„)  <--  if  x-0  then  i tl:e  j’FlF(x-l))  . 

Ue  shall  investigate  the  structure  of  the  set  of  fixedpoints  for  a feu  recureive 
programs  in  this  family,  thus  illustrating  the  behavior  of  the  optimal  fixedpoint 
approach  in  various  situations.  In  order  to  systematically  analyze  the  possible 
values  of  fixedpoints  for  some  x-a  , ue  evaluate  the  term  F(a)  by  repeatedly 
substituting  r IF]  for  various  occurrences  of  F . Note  that  ue  make  use  of  the 
fact  that  F represents  a fixedpoint  of  the  program,  but  not  necesearily  ths  leaet 
fixedpoint  or  the  optimal  fixedpoint. 


Program  P0y. 

F(x)  <--  if  x-0  then  0 tin  j*F(F(x-lll  . 

Let  us  analyze  the  possible  values  of  F for  successive  arguments  x » 
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The  maximal  fixedpoints 


Fig.  1 . The  fixedpoints  of  a recursive  program  . 


F (0)  - if  0-0  then  0 else  j-F(F(0-l))  - 0 

F ( 1 ) - if  1.0  then  0 else  j*F(F  (1-1 ) ) 

■ j*F(F(0))  ■ j * F (0)  ■ j'0  . 0 

F (2)  - if  2-0  then  0 else  j*F(F(2-l)  I 

■ j*F(F(l))  . j'F(0!  - j*0  ■ 0 

It  can  be  easily  shown  (by  induction)  that  F(x)-0  for  any  natural  number  x . Thus 

for  any  j , the  program  P#(  has  exactly  one  fixedpoint: 

t(x)  *0  for  any  natural  number  x . 

It  is  clearly  the  program’s  least  fixedpoint  as  well  as  the  prograa’e  optimal 
f i xedpo i nt . 

The  behavior  of  the  programs  changes  drastically  when  wa  take  I to  ba  1 rather 
than  0 . 

Program  Pl  0: 

F (x)  <••  ,/  x-0  then  1 else  0*F(F(x-l)»  . 

The  value  of  F(0)  is  clearly  1 , by  a direct  application  of  the  recureive 
definition.  For  x«l  , however,  ue  get: 

F ( 1 ) - if  1-0  then  1 else  0*F CF  (1-1 ) ) 

- 0*F (F  (0) ) . 0 • F ( 1 ) . 

Ue  now  have  exactly  two  possible  values  for  F (1)  i 
F ( 1 ) - undefined  or  F ( 1 ) - 0 . 

Selecting  the  first  possibility,  F (1 ) - undefined,  we  obtain: 

F (2)  - if  2-0  then  1 else  0*F(F(2-1 ) ) 

■ 0*F (F  (1 ) ) . 0'F  [undefined) 

- 0' (if  undefined -0  then  1 else  0'F (F iundefintd-l))) 

- 0' undefined  - undefined  . 

Continuing  in  this  way,  ue  get  the  fixedpoint: 
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(l  i f x-e 

undtfintd  otherwl  m . 

However,  if  ue  select  the  eecond  posaibi  1 1 ty,  F ( J. *■  >0  , us  have  to  continue  In  the 
foi  louing  u.»y: 


F (2)  - if  2-0  thtn  1 tin  0*F(F (2-1) ) 

- 0’F(F(in  - 0-F{0)  . 0-1  . 0, 

and  eo  on.  Ue  thue  get  the  fixedpoint; 
fl  i f x-0 

g ( ** ) - 

10  otherwise  . 

The  functione  f (x)  and  g(x)  jire  clear ly  the  only  poeeiblo  fixedpointe  of  the 
program.  Since  f (*)  ie  leee  defined  than  g(x)  , f (x)  ie  the  program's  leeet 
fixedpoint  while  g(x)  Ie  the  program's  optimei  fixedpoint. 

Program  P,  ,: 

F (x)  <—  if  x-0  thtn  1 flit  F(F(x-lJ)  . 

The  value  of  F (0)  ie  naceeaariig  1 . Evaluating  F(l)  , ue  geti 

F (1 ) - if  1-0  thtn  1 tlst  FCF  (1-1) ) 

- F (F (0) ) - Fill  . 

and  thue  any  nature'  number  (at  uell  aa  the  vaiue  undtfintd)  Ie  a eolution  of  thle 
equation.  If  ue  chooee  F(1  )mUndtflntd  , ue  get  (exactly  ae  In  program  P1(f)  the 
fixedpoint: 

{1  I f x-0 

undtfintd  otheruiee  . 

Since  any  other  fixedpoint  of  P,,,  muet  aieo  be  1 for  x-0  , f(x)  ie  clearly  the 
program's  least  fixedpoint. 

Suppose  ue  chooee  F(l)  ■ 0 . Ue  then  continue  ulthi 
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F(2)  - 1/2-0  thtn  1 tilt  F(F(2-1M 

- F (F  (1 ) ) - F (0)  - 1 

F (3)  - if  3-0  thtn  1 else  F(F(3-1)) 

- F (F  C2) ) - F (1 ) - 0 

and  so  on.  Ue  thuw  gat  the  fixedpoint: 

ll  i f x i a aven 
g(x)  J 

10  i f x i • odd  . 

If  ue  take  F ( 1 ) — 1 , ue  obtain: 

F (2)  - if  2-0  thtn  1 tilt  F(F(2-1)) 

- F (F  (1 1 ) - F (1 ) - 1 . 

and  ao  on.  Ue  thus  obtain  the  fixedpoint: 

h (x)  - I for  any  natural  number  x . 


If  ue  take  F(l)  - 2 , ue  get: 

F (2)  - if  2-0  thtn  1 tilt  F (F (2-1  > 1 
- F(F(1)I  • <{?.) 

and  again  ue  may  choose  any  dstired  value  for  F (21  (Including  the  value 
undtfintd ) . 

It  iu  possible  to  continue  this  detailed  analysis  and  find  infinitely  many  more 
fixadpointa  of  PM  . But  in  order  to  characterize  the  optimal  fixedpoint  of  this 
program  it  suffices  to  consider  just  one  more  fixedpoint: 

k(x)  - x+1  for  any  natural  number  x . 

Since  the  optimal  fixedpoint  hould  be  less  defined  than  both  maximal  fixadpointa 
h(x)  and  k(x)  . it  cannot  be  defined  for  any  x>0  (for  any  such  x both  h(x)  and 
k(x)  are  defined  and  h(x)xk(xl)  . Therefore  the  program’s  optimal  fixedpoint 
coincides  in  this  case  uith  the  program’s  leaet  fixedpoint  f (x)  , 

Program  P ,t2: 


1 


F(x)  <—  If  x-0  thtn  1 tlst  2*F(F(x-l))  . 
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Ae  before,  all  fixedpointe  of  Pu  are  defined  ae  1 for  x-0  . For  x-1  ue  have 

F(l)  - if  1-0  tktn  1 tlst  2'F(F (0) ) - 2*F (1)  . 

Ue  have  arrived  at  an  equation  (for  the  value  of  F(l)  ) which  haa  exactly  two 
eolutiones 

F(l)  • undtflntd  or  F(l)  • 0 . 

If  ue  decide  to  take  the  value  F(l)  . undtflntd,  ue  aga>n  get  the  flxedpointi 

f (x) 

which  ie  the  program’e  leaet  fixedpolnt. 

Chooeing  the  other  poeeibllity.  i.e.,  F(1).0  , we  geti 

F (2)  - 2‘F (F (1) ) . 2’F (01  . 2 , 

F(3)  . 2*F (F (2) ) . 2*F(2)  - A , 

and  final ly: 


1 I f x-0 

t undtflntd  otheruiae 


F(4)  - 2*F (F (31 1 - 2’F (A)  . 


The  valuee  for  F(2)  and  F(3)  uere  ieplied,  once  ue  choee  F(l)-0  . But  for  F(4) 

ue  again  have  to  chooee  between  the  two  poeetble  eolutione  of  the  equation 
namely, 


F(4)  - undtflntd  or  F(4)-0  . 


If  ue  chooee  F(4 )-undtflntd  , then  an  crgueent  elailar  to  the  one  ueed  prevlouely 
ehoue  that  for  any  x>4  , F (x) mundtflntd,  Thua  ue  have  the  fixedpolnt 


g(x) 


i undtflntd 


if  x-0 
if  x-1 
if  x-2 
i f x>3 
otheruiae 
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However,  if  we  choose  F(4)«0  , we  must  continue  as  follows 


F(5)  - 2* F (F  (4) ) . 2* F (0)  . 2 
F (6)  - 2*  F (F  (5)  I - 2*F  (2)  - 4 


F (7)  - 2-F(F(GI)  - 2*F (4)  . 0, 

and  so  on.  The  periodic  function  thus  obtained  is  defined  for  any  natural  number 
* as: 


h (x) 


if  X-0 
if  x-l+3i  1 

i f x-2+3i  l i-0,1,2,... 
i f x«3+3  i J 


To  sum  up.  the  recursive  program  P,2  has  exactly  three  fixsdpoints,  each 
generated  by  a different  selection  of  a solution  to  the  above  equationsi 


f (x) 


•{ 


ndtfimd 


i f Xa0 

otherwise 


glx) 


[undefined 


i f x-0 
if  x-1 

if  x-2 
i f x-3 
otherwi se 


hlx) 


if  x-0 

i f x»l+3i ) 

i f x«2+3i > i»0,l  ,2, . . . 
if  x-3+3ii 


Note  that  f is  less  defined  than  g and  g is  less  defined  than  h . The  only 
maximal  fixedpoint  of  this  program  is  h , and  thus  It  is  also  the  propraa’e 
optimal  f ixedpoint. 


Program  P^: 


F(x)  <~  if  x.0  then  1 tin  3-F(F(x-l))  . 

Ae  before,  F(0)-1  , and  there  are  exactly  two  possible  values  for  F(l)  i 
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F (1 ) • undiflntd  or  F(l)  ■ 0 


The  first  possibility  issds  to  ths  ssss  issst  fixsdpoint  as  bsforsi 


f(x) 


{ 


if  x-0 


undtflrud  otherwise 


Ths  sscond  possibility  issds  toi 


F (21  - 3*F(F(in  - 3*F (01  - 3 , 


F (3)  - 3-F(3)  . 


Hsra  us  havs  ths  same  choica  ones  sort. 


F (3)  • undtflntd  or  F (3)  ■ 0 


If  us  choosa  F(3)-un<fr/In#d  we  gat  tha  fixsdpoint 


rl  i f *x0 

0 if  x.l 

g(x)  • { 3 if  x»2 

jundeflntd  otherwiss 


However,  if  wa  choosa  F(3)-0  ws  continue  with 


F (41  - 3*F  (F  (3) ) - 3'F  (0)  - 3 . 


F (5)  - 3’F  (F  (4) ) - 3’F  (3)  - 0 , 


and  so  on,  and  wa  obtain  tha  third  possible  fixedpoints 


h (x)  - < 0 
l3 


{ 


if  x-0 

if  x-l+2i)  i *0 ,1,2,... 
if  x-2*2l] 


Tha  optimal  fixsdpoint  of  is  clearly  Mxi 


Program  P|t«: 


F (x)  <—  tf  x.0  thtn  1 tlst  4*F (F(x-l) ) . 


Thu  program  behaves  entirely  differently  fro*  Ihc  (.Ini  considered  previously. 
For  x-0  , ue  etill  gat  F (0) -1  . For  x«l  , ue  gati 


F (1 1 - 4*F(F(0))  . 4 ’ F < 1 ) , 
and  ue  have  the  sane  choice  as  before, 

F(l)  - undefined  or  F < 1 ) - 0 . 

If  we  take  F(1)»0  , we  continue  withi 

F (2)  - 4*F  (F  Cl) ) . 4 * F ( 0)  - 4 , 
and  therefore: 

F (3)  - 4*F(F(2j)  - 4 • F (4)  - 16* F IF (3) ) . 

Here  we  encounter  a new  probHjmi  Ue  do  get  an  equation  for  the  value  of 
but  F (3)  it  contained  in  another  occurrence  of  F on  the  righthand  aide 
equation.  Since  we  do  not  knew  the  global  behavior  of  thla  function,  ua 
simply  eolve  this  equation.  However,  baaed  ipon  results  In  number  theory, 
be  ehown  that  any  fixedpoint  of  this  program  must  be  undefined  for 
Therefore,  the  program  P,4  has  exactly  two  flxedpolnts: 

i f X«0 

otherui se 


i f x-0 
It  x-l 
i f x-2 
\ undefined  otherwise  . 

Since  f is  less  defined  thar!  g , f Is  ths  program's  least  fixedpoint  and  g 
program'e  optimal  (and  maximal)  fixedpoint.  In  contrast  to  programs  P,j,  P 
P|,3,  the  optimal  fixedpoint  Is  not  a total  function,  even  though  It  le  stil 
defined  than  the  least  fixedpoint. 

Finally,  ue  consider 


f (x) 


■{' 

\ undefined 


and 


rl 

0 

g(x)  - ^ 4 


F(3)  , 
of  the 
cannot 
it  can 
x*3  . 


is  the 
1,2  ■nd 
I more 
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Program  P)  9i 


r (*»  < — if  x-0  thtn  1 ilst  S’FfFIx-l))  . 

For  x-0  we  clearly  have  F(0)-1  . For  x-1  , we  have,  a*  usual,  the  choice  between 
F (1 ) mundtfintd  and  F(l)-0  . I f we  take  the  eecond  possibility,  we  get  F(2)»5  , The 
difficulty  arises  when  considering  the  possible  values  of  F(3)  » 


F (3)  - S'F(F(2n  - 5-F15)  - 2S*F  (FC4) ) - 25*F C5*F (F (3) ) ) . 

This  equation  is  too  difficult  to  be  I nnaci lately  solved. 

Based  upon  considerations  which  are  beyond  the  scope  of  this  paper,  we 
can  find  the  following  two  fixedpolnts  of  P|9t 

(\  if  x-0 


g(  (x)  • ^0 


If  x-U2i1 

if  x-2+2i I i-0,1,2,... 


g2(x) 


i f x— 0 
i f x-l+3i \ 

i f x«2+3i  ( i-0,1,2, .. . 
i f x«3+3ij 


The  optimal  fixedpoint  must  be  less  defined  than  both  of  these  two  total  (end 
therefore  maximal?  fixedpoints.  so  it  can  be  defined  only  at  arguments  of  the 

form  x-1  +6 i and  x-2+Gi  , for  i-0,1,2 However,  the  function  thus  obtained  ie 

not  a fixedpoint  of  the  program  (e.g.,  try  x-7) . It  can  be  shown  that  the  only 
two  fixedpoints  of  P,5  which  are  less  defined  than  thle  function  sret 


'{ 


f x-0 


undtflntd  otherwise 


( undtflntd 


If  x-0 
i f x-1 
i f x-2 
otherwise 


The  function  f(x)  Is  clearly  the  program's  least  fixedpoint.  The  fixedpoint  h(x) 
le  fxp-conel stent,  eince  all  ite  values  are  uniquely  determined  by  the  equations. 

Since  the  optimal  fixedpoint  must  be  either  f (x)  or  h(x)  , and  the  more  defined 
function  h(x)  is  fxp-cnnsi stent,  Mx)  is  the  program's  optimal  fixedpoint.  Nota 


17 


r 


th«  similarity  betueen  tha  optimal  fixedpointa  of  P,«  and  P,s  - both  arc  dafinad 
only  for  x-0  , x-i  and  x-Z  j in  P|4  thia  ia  due  to  tha  lack  of  poeeibla 
f I xedpoi  nta,  while  in  P)S  it  ia  dua  to  their  multiplicity. 

One  could  continue  to  check  all  programs  Pu  with  j greater  than  5 . However,  we 
believe  that  the  pr-ceding  examp  lei  sufficiently  illustrate  the  variety  of 
possible  caaee  in  the  new  optimal  fixedpoint  approach.  It  ia  aepacially 
intereating  to  note  that  ill  though  the  leaat  fixedpoint  of  all  programe  P,j  ia  the 
same,  the  sets  of  all  fixedpointa,  aa  wall  it  tha  optimal  flxedpolnte,  of  three 
programe  differ  uidely.  Ue  summarize  thia  eituation  in  Fig.  3.  where  we  exhibit 
the  sets  of  fixedpointa  of  programe  PlJt  to  Pl8  . The  leaet  fixedpoint  of  any  euch 

program  is  repreeented  by  the  loweat  dot,  while  the  optimal  fixedpoint  ie 
repreeented  by  the  dot  aurrounded  by  a circle. 

In  the  examples  coneidared  ao  far,  varioua  tachniquaa  ware  uaad  to  find  tha 
correct  value  of  the  optimal  fixedpoint.  Some  of  theee  tachniquaa  are  aaeily 
mechanizable  uhile  othere  require  deep  mathematical  knowledge.  Unlike  tha  leaet 
fixedpoint  of  a recursive  program,  the  optimal  fixedpoint  need  not  be  9 
computable  function.  Thua  there  cannot  be  a "complete"  computation  rule  which 
aluaya  computes  the  optimal  fixedpoint,  but  wc  can  still  hope  to  find  good 
computation  techniquee  which  are  applicable  to  large  aubaeta  of  commonly  uaad 

I programe.  The  axamplaa  diecueeed  in  thia  eectlon  give  tha  flavor  of  a few  euch 

tachniquaa. 


V.  Proof  Techniques 

In  thia  eection  we  illuetrate  several  techniquee  for  proving  proper tiae  of 

optimal  fixedpointa.  Us  wiah  to  show  that  optimal  fixedpoint  f of  a given 
recureive  program  P has  aome  property  Q[fJ  without  actually  computing  the 
fixedpoint.  The  property  Q is  a functional  predicate,  which  may  characterize  tha 
overall  behavior  of  f , For  example,  Qif)  can  state  that  f is  a total  function, 
or  that  f equals  some  given  function  g , or  that  f ie  monotonlcal ly  increasing 
over  some  ordered  domain,  etc. 

Generally  epsaking,  there  are  three  elements  involvsc  n the  process  of  proving 
propertiee  of  fixedpointei  A function  f , a domain  D , and  a desired  property  Q 
Any  one  of  these  three  elements  can  be  uaad  ae  the  baele  for  induction. 

The  two  classical  methods  for  provinn  propertiee  of  leaet  fixedpointa  use 

[induction  on  the  function  and  on  the  domain.  In  the  computational  induction  method 
J v (deBakker  and  Scott  (19691),  one  firet  proves  the  property  Q over  D for  a vary 

simple  function  f#,  and  then  successively  treats  better  approximations  f,  of  f 
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In  the  structural  induction  method  (Burstal  I [19691 ) one  ueee  induction  over  the 

elemente  of  the  domain  0,  leaving  f and  Q unchanged. 

Uhile  thees  two  general  methods,  appropriately  modified,  can  eieo  be  ueed  to 
prove  properties  of  the  optimal  fixedpoint  in  some  cases,  ue  euggeet  a new 

induction  method  (called  assertion  induction)  which  uses  the  property  Q ae  the  baeie 
for  induction.  Eve  though  this  third  type  of  induction  has  been  totally  ignored 
in  the  leoet  fixedpoint  approach,  it  turns  out  to  be  a very  ueeful  technique  in 
the  optimal  fixedpoint  approach. 

Uhat  ue  actually  prove  in  the  assertion  induction  method  :s  that  any  fixedpoint  f 

of  the  program  belonging  to  some  given  subset  S of  partial  functione  haa  the 

property  Qff]  The  fact  that  the  optimal  fixedpoint  g poeeaeeee  the  deeired 
property  is  derived  either  as  a special  case  (if  g c S ),  or  ae  a result  of  eome 
further  argumentation  (baaed  on  the  definition  of  g ae  the  greatest  fixedpoint 
which  ie  fxp-conei stent) . 

Note  that  F,  may  contain  functions  uhi:h  are  not  fixedpointe  of  the  program,  and 
theee  furctlone  need  not  have  the  property  Q . The  assertion  induction  method 
only  ehowa  that  all  functione  in  S which  are  fixedpointe  of  the  program  have 
proper  * y Q . The  role  of  the  subset  S is  to  rule  out  certain  unwanted  fixedpointe 
which  do  not  have  the  desired  property  Q . 


* 


T he  Asstrtio a Induction  Method 

Given-.  A recureive  program  P s F(x)  <—  r(F]  (x)  , a property  QF)  , and  a eubeet  S 
of  partial  functione. 

Goal:  To  prove  that  Q[f]  holds  for  any  fixedpoint  f of  P such  that  fcS 
Method:  Find  a sequence  of  predicates  Q,(F]  , i-0,1,2,...  euch  that* 

(a)  Qq [ f ] holds  for  any  fcS  . 

(b)  If  Q, ( f 1 hoide  for  some  f«S  end  TlfJcS  , then  Q^trlfJ] 
holds. 

(c>  For  any  fcS  , if  Q,(f]  holds  for  all  I , then  QtfJ  also 
holds. 

This  method  can  be  justified  by  the  following  argument*  By  pert  (•) , any 
fixedpoint  fcS  has  property  Q,(f]  . By  pert  (b),  if  a function  fcS  has  property 
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a,m  . and  ftflcS  . than  T[f!  hae  proper  ty  QM  [r  ffj]  . But  if  f la  • fixedpoint. 
then  f-rtf]  .0  rtflcS  . and  f has  property  Q„ , If)  . By  induction,  any  flxadpoint 

f‘S  ha*  the  Properties  Q,tf)  for  i-0.1,2 Thue.  part  (c)  impli..  that  f haa 

property  Qlf]  . Note  that  since  f ie  replaced  by  rtf)  in  the  induction  atap,  any 
f which  is  not  a fixedpoint  of  r ia  not  guaranteed  to  hove  ail  the  propartiao  Q,  . 


Ue  illufrate  this  method  with  the  following  recureive  program  over 
numbers: 


the  natural 


\ 


p<“  F(x)  <mm  if  F(**1?>0  then  F(x*lU;  else  0 . 


The  least  fixedpoint  of  this  program  is  everywhere  undefined . Ue  uould  like  to 
prove  that  the  optimal  fixedpoint  of  thie  program  is  the  constant  function 

f(x)-0  for  any  natural  number  x . 

Ue  first  prove  two  properties  of  the  fixedpoints  of  P4  which  enable  ue  to 
properly  choose  the  subset  S of  partial  functions: 

( i ) For  any  flxtdpoint  f of  P4  and  for  any  natural  number  x , 
f(x*D  it  undefined  if  and  only  if  fix)  is  undefined. 


To  show  this,  assume  that  Mx*l)  is  undefined : then  clearly  f[f](x)  • if  f(x+l)>0 

then  f(x*l)  else  0 cannot  be  defined.  Since  f(x)-r[f)(x)  , f(K)  ie  also  undefined. 

On  the  Other  hand,  if  f(x*l)  is  defined,  then  r[f](x)  i.  also  defined,  and  alnce 
f(x)»tf)(x)  , f ( x)  isdefi  ned. 


( i i ) For  any  fixedpoint  f of  P4  and  for  any  natural  number  x , 
f(x*l)mO  if  and  only  if  f(x)-0  . 


Thie  can  be  shoun  in  exact  y the  same  way  as  in  part  (i)  above. 

These  two  properties  characterize  two  possible  fixedpoints  of  tha  program  P4  , f 
which  i«  everywhere  undefined  and  g which  ie  everywhere  zero.  Our  aim  now  la  to 
show  that  the  recursive  program  hae  no  other  fixedpoints.  end  therefore  while  f 
ie  the  program’s  least  fixedpoint,  g ie  the  program's  optimal  fixedpoint. 


The  above  two  properties  imply  that  any  fixedpoint  of  P4  i.  .|ther  totally 
defined  or  totally  undefined,  and  that  for  any  total  fixedpoint  h , either  h(x)-0 
for  all  x or  h(x)*0  for  ai  I x . Therefore  we  define  S as  tha  aet  of  all  total 
functions  which  are  everywhere  greater  than  zero,  and  try  to  prove  that  P4  hae  n« 
f i xedpoint  in  S . ° 
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In  order  to  achieve  this,  ue  formal  ly  define  the  predicate  Qtf]  to  be  alu  j# 
"false”.  The  sequence  of  intermediate  predicates  ue  use  isi 

Q,rf]  is  trua  i*  and  only  if  f(x)>i  for  all  natural  numbers  x . 

Step  a:  By  the  dsfimtion  of  S , any  f c S is  everywhere  greater  than 

zero,  and  therefore  QaIf]  holds. 

Step  bi  Suppose  Q,lf)  holds  for  some  i and  fcS  . Then  by  definition, 
f I x ) > i for  all  natural  numbers  x . Using  thiu  property,  ua 
can  simplify  the  expression  flfHx)  t 

f If)  (x)  • if  f(x+l)>0  then  f(x+l)+l  list  0 

• f(x  + l)4-l. 

Since  f (x-fl ) > i , ue  have  f(f)(x)>i+l  . Therefore  Q^lrtf)] 
also  holds. 

Step  Ci  Suppose  that  some  total  function  fcS  satisfies  Q,[f]  for  ?.  I 
i . Then  for  any  natural  number  x . f(x)>i  for  al  I i , and 
this  is  clearly  a contradiction.  Therefore  ><ny  such  f aleo 
satisfies  Q[f]  which  is  always  "false". 

This  completes  the  induction  step,  and  the  method  thus  guarantees  that  S doee  not 
contain  any  fixedpoint  of  P4  . 

Thu9  far  ue  have  introduced  the  new  assertion  induction  method.  Ae  mentioned 
above,  the  tuo  claeeical  proof  methods  can  also  be  used  to  prove  propertiee  of 
the  optimal  fixedpoint.  Ue  show  here  an  appropriately  modified  version  of  the 
structural  induction  method. 


The  Structural  Induction  Method 

The  structural  induction  method  is  intended  to  prove  that  a fixedpoint  f of  a 
recursive  program  P has  some  "pointwise"  property  Qtf](x)  for  ail  x in  the  domain 
0 . The  main  idea  is  to  partition  D into  subsets  S9,S|,...  such  that 


0-  U S, 
j-o 


22 


and  to  prove  that  Q(f](x)  holde  for  all  xcSj  uaing  induction  over  the  index  I 
Thus,  one  has  to  show  that  for  any  i , if  QlfUx)  holde  for  all 


!: 


i-1 

xc  U S, 
j-0 


then  Qtf]  (x)  holde  for  all  x(S,. 


This  implication  ie  usually  proved  by  freely  replacing  any  occurrence  of  f by 

r[f]  (since  f is  a fixedpoint)  and  applying  the  induction  hypothssle  to  the 
resultant  expression.  This  method  can  also  be  used  to  prove  properties  of  optimal 
fixedpointe,  but  one  usually  has  to  apply  some  additional  specific  reasoning 
techniques,  such  as  equation  solving  or  case  analysis  of  poeeible  values. 


Ue  illustrate  this  method  uith  the  following  program  PS  over  the  natural  numberet 


P5r  F (x)  if  x-0  then  0 else  F (x-F Cx) ) . 

Ue  uould  like  to  prove  that  tha  optimal  fixedpoint  f of  P5  eatlefleei 
Qtf] (x)  s f (x)-0 
for  any  natural  number  x , 

Ue  partition  the  domain  of  natural  numbers  in  the  folloulng  uayi 
Sq—  (0i  S | - (II  Sj- (21  ... 

The  fact  that  Q(f)  (0)  holds  (i.e.,  f (0)>0  ) is  a direct  consequence  of  the 
definition  of  P5  . 

1-1 

Assume  that  ue  have  already  shown  that  Q(f](x)  holds  for  all  x c U Sj 

J-0 

(i.e.,  for  all  0Sxsi-l  )•  ue  now  prove  that  Qtf]  (x)  holds  for  all  xc$j  (I.e.,  for 
x-i  ).  Since  f is  a fixedpoint  of  P5  and  i>0  , ws  havei 

f ( i ) - f ( i - f ( i ) ) . 


Ue  use  case  analysis  in  order  to  find  all  the  possible  valuee  of  f(l) 

One  possible  value  of  f(l)  Is  clearly  undefined.  In  order  to  check  whether  f(() 
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1 


has  any  possible  defined  value  assume  that  f ( i ) -k  for  some  natural  number  k 
Substituting  this  value  into  the  definition  of  f(i)  , ue  get: 

k . f ( i ) * f ( i - f t i ) ) - f(i-k)  . 

Ue  consider  tuo  possible  cases: 

(a)  If  k-0  , ue  obtain  the  requirement 

0 - f ( i > 

and  this  value  is  clearly  consistent  with  our  aeeumption 
that  f(i)»K-0  . Thus  zero  is  a Possible  value  of  f(i)  . 

(b)  If  k>0  , ue  obtain  the  requirement  that 

f(i-k)  > 0 , 

but  since  i >0  and  k>0  . • -k< i , and  this  contradicts  uhat 
ue  knou  (in  the  induction  hypothesis)  about  the  optimal 
f ixedpoint: 

f (x)-0  for  all  * , 0Sx2i  . 

Therefore  Mi)  cannot  have  the  value  k for  any  k>0  . 


Ue  have  thus  shoun  that  the  only  tuo  possible  values  of  fli)  are  undefined  and  0 
By  the  definition  of  the  optimal  fixedpoint,  us  can  nou  deduce  that  f(l)-0 

Since  this  holds  for  any  natural  number  i , the  optimal  fixedpoint  le  everywhere 
def i ned  as  zero. 


VI.  Conclusion 


In  this  paper  ue  have  presented  the  optimal  fixedpoint  approach  touarde  recureive 
programs.  Uhile  it  is  clearly  appealing  from  a theoretical  point  of  vieu,  it  has 
a draubcck  in  practice:  it  may  be  either  Impossible  or  extremely  hard  to  find  the 
optimal  fixedpoint  of  some  recursive  programs.  Uhile  ue  cannot  develop  perfect 
implementations,  ue  can  try  (perhaps  using  heuristic  techniques)  to  extract  ae 
much  information  from  the  program  as  possible.  Such  an  implementation  will  yie|d 
the  optimal  fixedpoint  for  certain  classes  of  recursive  programs,  it  will  compute 
some  intermediate  fxp-conei stent  fixedpoint  for  other  classes;  and  in  the  uoret 
case  will  yield  the  least  fixedpoint  of  the  program  (as  computed  by  the  claseicel 
etack  implementation).  By  insisting  on  finding  a more  informative  solution  of  a 
recureive  program  than  the  least  fixedpoint,  it  is  natural  that  the  efficiency  of 
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computat  ion  rules  is  reduced  and  the  complex!  itU  of  proof  technique  is 
i ncreased. 

The  development  of  this  new  approach  I.  .till  underway,  both  in  I ts  theoretical 
and  practical  aspects. 


*********************** 

Footnotes 

(i)  All  functions  in  this  program  map  natural  numbers  Into  natural  numberei  thus 

x-1  ie  defined  to  be  0 for  x-0.  ’ 

(ii)  The  theorem  is  proved  in  Manna  and  Shamir  [1975],  Theorem  3. 

(.ii)  For  a more  rigorous  statement  of  this  result  and  its  proof  eee  Theorem  S in 
Manna  and  Shamir  [1975] . 
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